chore(deps): update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
click (changelog)	==8.2.1 -> ==8.3.0
google-auth	==2.40.3 -> ==2.41.1
google-cloud-bigquery	==3.37.0 -> ==3.38.0
grpcio (source)	==1.75.0 -> ==1.75.1
grpcio-status	==1.75.0 -> ==1.75.1
markupsafe (changelog)	==3.0.2 -> ==3.0.3
pyparsing	==3.2.4 -> ==3.2.5
shapely	==2.1.1 -> ==2.1.2

---

Release Notes

pallets/click (click)

v8.3.0

Compare Source

Released 2025-09-17

• Improved flag option handling: Reworked the relationship between flag_value
  and default parameters for better consistency:

  • The default parameter value is now preserved as-is and passed directly
    to CLI functions (no more unexpected transformations)
  • Exception: flag options with default=True maintain backward compatibility
    by defaulting to their flag_value
  • The default parameter can now be any type (bool, None, etc.)
  • Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610
    :issue:3024 :pr:3030

• Allow default to be set on Argument for nargs = -1. :issue:2164
  :pr:3030

• Show correct auto complete value for nargs option in combination with flag
  option :issue:2813

• Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

• Lazily import shutil. :pr:3023

• Properly forward exception information to resources registered with
  click.core.Context.with_resource(). :issue:2447 :pr:3058

• Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

v8.2.2

Compare Source

Released 2025-07-31

• Fix reconciliation of default, flag_value and type parameters for
  flag options, as well as parsing and normalization of environment variables.
  :issue:2952 :pr:2956
• Fix typing issue in BadParameter and MissingParameter exceptions for the
  parameter param_hint that did not allow for a sequence of string where the
  underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
• Use the value of Enum choices to render their default value in help
  screen. Refs :issue:2911 :pr:3004
• Fix completion for the Z shell (zsh) for completion items containing
  colons. :issue:2703 :pr:2846
• Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
• Fix a rare race in click.testing.StreamMixer's finalization that manifested
  as a ValueError on close in a multi-threaded test session.
  :issue:2993 :pr:2991

googleapis/google-auth-library-python (google-auth)

v2.41.1

Compare Source

Bug Fixes

• Suppress deprecation warning for ADC (#​1815) (751ce3f)

v2.41.0

Compare Source

Features

• Add support for cachetools 6.0 (#​1773) (af18060)
• Add trust boundary support for service accounts and impersonation. (#​1778) (99be2ce)

Bug Fixes

• Deprecating load_credentials_from_dict (58b66ec)
• Deprecating load_credentials_from_file (58b66ec)
• Fix type error in credentials.py for python 3.7 and 3.8 (#​1805) (c30a6a7)

Documentation

• Update user guide to include x509 feature. (#​1802) (2d89ab4)

googleapis/python-bigquery (google-cloud-bigquery)

v3.38.0

Compare Source

Features

• Add additional query stats (#​2270) (7b1b718)

grpc/grpc (grpcio)

v1.75.1

Compare Source

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

• Release grpcio wheels with Python 3.14 support (#​40403)
• Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#​40447)
  • This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #​36655, #​38679, #​33342
• Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#​40750)
  • Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

pallets/markupsafe (markupsafe)

v3.0.3

Compare Source

Released 2025-09-27

• __version__ raises DeprecationWarning instead of UserWarning.
  :issue:487
• Adopt multi-phase initialisation (:pep:489) for the C extension.
  :issue:494
• Build Windows ARM64 wheels. :issue:485
• Build Python 3.14 wheels. :issue:503
• Build riscv64 wheels. :issue:505

shapely/shapely (shapely)

v2.1.2

Compare Source

Wheels are available for Python 3.14 (and still include GEOS 3.13.1).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.